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Advances in quantum physics and computational complexity threaten the security of present day 
cryptographic systems and have driven the development of quantum key distribution (QKD). Entan- 
gled quantum key distribution (EQKD) is a secure protocol that is based on fundamental quantum 
mechanics and is not vulnerable to these threats. The primary figure of merit for QKD systems is 
ability to generate secret bits. However, to date, methods that have been developed to simulate the 
secret bit rate generation for EQKD systems have been limited by techniques that do not provide 
a complete description of the quantum state produced by the source. In this paper, we provide 
a complete description and comparison of the secret bit rate for continuous-wave and pulsed laser 
EQKD systems. In particular, we highlight the relevant Poissonian and thermal photon statistics 
that affect the EQKD secret bit rate and use practical system parameters and configurations to 
show regimes where one expects optimal performance for each case. 
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I. INTRODUCTION 

Entangled Quantum Key Distribution [3] is a protocol 
to allow two remote parties to generate a shared secret. 
The key, or random bit string, is shared between the two 
parties, Alice and Bob, without a third party. Eve, gain- 
ing any information about the key. EQKD consists of 
three parts and three stages. There is a source of en- 
tangled two-level systems, generally pairs of entangled 
photons produced by down-conversion. Experimentally, 
this has been preformed for both pulsed and continuous- 
wave (CW) laser systems [SI'S]. Additionally, there are 
two detectors each for Alice and Bob. The first phase of 
the protocol consists of data collection. The source emits 
a pair and sends one half to Alice and one half to Bob. 
Alice and Bob each make measurements in one of two 
orthogonal bases. In the second phase they reconcile the 
measurements, keeping only the data where they mea- 
sured in the same basis and they both received a signal. 
They now share a noisy key between them. The final 
stage is error correction and privacy amplification. They 
compare information over an authenticated public classi- 
cal channel and correct all errors calculating a bit-error 
rate (BER) value. It has been shown the Eve's infor- 
mation is bounded by this BER. They then calculate 
the amount of privacy amplification necessary and per- 
form the privacy amplification to make Eve's information 
negligible. 

The formula [10 for the amount of secret key generated 

is 



than 1 for error correction or privacy amplification re- 
sepctivly, and H2 is the binary Shannon entropy. In the 
rate formula shown above, the BER is the only variable 
that is difficult to simulate. [T] has shown simulations for 
the BER and key rate in a system with a pulscd-source 
laser, which obeys thermal statistics. Here, we expand 
that technique from pulsed systems to allow for the anal- 
ysis of continuous-wave (CW) laser systems as well as all 
intermediate ratios of thermal and Poissonian statistics. 
With the expanded technique in place, we compare CW 
and pulsed systems for a variety of realistic experimental 
parameters. The paper is organized as follows: section 
II describes how to simulate the BER for a CW-laser. 
Section III shows the results and compares the situations 
where the source is in Alice's enclave or in the middle. 
Section IV shows how the procedure in section II can be 
adjusted for any value from a completely thermal state 
to a completely Poissionian state. Finally, in section V 
CW-laser systems are compared to pulsed-laser systems. 

II. CALCULATING THE BER FOR A 
CW-LASER 

To calculate the BER from a CW-laser system, we can 
use the same method as in [T], except with a different 
initial state due to the fact that we are now considering 
a CW source. The initial state for a CW-laser over the 
time period given by the timing window of Alice's and 
Bob's detectors |2j is 



K=S + D-{fEc + fpA)-S-H2 (BER) (1) 

where S is the number of sifted bits, D is the number 
of dark counts, fEC/PA is an efficiency factor greater 
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i*) = c^E^*'l^^w)- (2) 

M=0 

where \M{N)^ is the unnormalized state of equal su- 
perpositions of all states with M excitation pairs and 
N modes, N is the number of modes available, approxi- 
mately ^r^, St is the detector timing window, and tcoh is 
the coherence time of the light field. The constants C, T 
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are defined as C = cosh(f), T = tanh(^) with ^ being 
proportional to the amplitude of the laser pump field. 

Expressing the unnormalized state |M(7V)) in terms 
of the normalized state \M{N)), requires counting all the 
ways that M indistinguishable pairs may be placed into 
N in principle distinguishable modes. The normalization 
is then the square root of the number of nonnegative 
solutions to xi + X2 + ■ ■ ■ + xn = M, 



\M{N)) 



+ - 1 



M 



\M{N)) 



\xi,X2,...,Xn) . 



(3) 



Xi>0 



Since the timing window contains many modes, we 
count m clicks from all modes the same We can 
neglect which mode is which and define |M7r(a;)) as the 
unnormalized state corresponding to the symmetric poly- 
nomial . Where tt is some partition of M into N pieces 
(some may be zero) representing a particular solution to 
the equation above. Expressing tt as a multiplicity vec- 
tor*: 



{M^{x)\ M^{x)) 



mi\m2\ ■ ■ ■ vfiM^-in — Z(7r))! 
M^(l) (4) 



where 1{ti) is the length of the partition. Putting it all 
together 



\M{N)) = 



V C'^^m"') flt.V "'i'™2!..mM!(iV-/(7r))! 
X --^ — -M^{a\,a\,...,a\)\Q) 

= ^^:=Y.4^^)\MAS)) (5) 

(M+N-l\ -T-f. * 

The BER of the state \^) is a weighted sum of the 
BERs due to \M{N)) which in turn is a weighted sum 
of the BERs due to |M^(f)). 

For a state \MTr{x)) with n \- M, n — 
7ri7r2 . . . 7r;(^), we calculate the BER. \Mj^{x)) = 



The multiplicity vector is one way of describing a partition. Tlie 
j*'^ entry in the vector tells how many times the number i ap- 
pears in the partition. For example, if tt h 5 = {1, 1, 3} then the 
multiplicity vector would be (2,0,1,0,0). Another way to rep- 
resent partitions used in this paper is the Young Diagram. This 
is a left-justified array of boxes such that no row has a greater 
number of boxes than the rows above it. In the above example 




m, M — m) where \m, M 



the 



m=0 



state with m pairs with horizontal polarization and 
M—m pairs with vertical polarization. is the number 
of distinct ways you can have m horizontally polarized 
pairs given a state with a partition tt of AI and \/C is 
the normalization. 

If TT ^ III ... (i.e. a thermal state) then is the 
number of nonnegative integral solutions to the equation 



TTi = m xi € {0, 1, .., M} 
Xj>i G {0} 



(6) 



AIL = 1 and C = M + 1. 



If TT ^ □ ... (i.e. a Poissionian state) then is the 
number of nonnegative integral solutions to the equation 



■7TI+TT2 



7r;(7r) =m e {0, 1} 

/(tt) = M (7) 



M 



AZ, = O and C = 5: 



m=0 



M 



= 2 



M 



For a general partition is the number of nonnega- 
tive integral solutions to the equation 



7r((7r) 



m Xi ^ {0, 1, 
/(tt) = M 



(8) 



To find let S be the set of nonnegative integral so- 
lutions to the unbounded problem. Let Si be the set of 
nonnegative integral solutions to the problem where all 
variables are unbound except Xi > tt^. Further let Sa 
be the set of nonnegative integral solutions to the prob- 
lem where all variables are unbounded except Xi > TTi, 
Vi e A. Now, we can express in terms of 15^1, 
\Sa\. 



and by the principle of inclusion and exclusion [5] 

Az. = \s\ + j2i-ir E i^^^^i 

r=l Tr:\Tr\=r 

TrC{0,l,...,li-rT)} 

M 

C = Y.Al^■ (9) 

jn=0 



Calculating the cardinalities yields 
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'/(tt) - 1 + Af ■ 



Secret Key Rate (R) vs. Transmission Losses 



iM - 1 

, otherwise 



15^,1 = I ^ ^ . _ |,m>7r, + 1 



\Sa\ 



, otherwise 



(10) 



Now, we have a way of calculating the BER of the 
state \Mtj{x)) as a weighted sum of the BER of the states 
|m, M — to). From [1 the BER for a state |to, M — m) 
is 



e^M = eo - ( (^^^ [(1 - r^^r " (1 - r;^)*'-'"] 



[(l-r;s)"-(l-r;s)*^-"]), 



(11) 



where cq is the error rate of the dark counts (^), is the 
detector error rate, and t?a/_b is the detector efficiency of 
Alice or Bob including the losses in the optical path from 
the source to the detector. 



III. CW-LASER SIMULATIONS 

With the BER of a state in the form of (Eqn. |2|, we 
can easily simulate what the secret key generation rate 
will be for any set of system parameters. The results are 
shown in Figs, [l] and [2j For the simulations we used a 
system visibility of 97% and operated for 100 s and set 
the optical loss within both Alice's and Bob's enclaves 
as 7 dB including detector efficiency. The simulation pa- 
rameters for the detectors were that they had a dead time 
of 1 /is and a dark and background count rate of 1500 Hz. 
The timing window was set at 1 ns. For the source, we 
used a variable S for the pair generation rate per second. 
This was modified by a geometric factor of G = (3%)^, to 
get the number of pairs sent to Alice and Bob per second. 
The coherence time for the down-converted light was 100 
femtoseconds. 

Fig. [l] shows the secret key generation rate vs distance 
between Alice and Bob for a variety of power levels for 
a system with the source in the middle and for a system 
with the source inside Alice's enclave. With low power, 
having the source in the middle doesn't improve the max- 
imum rate significantly. Yet, when S = lO^'^ pairs / s, 
having the source in the middle improves the distance by 
50 km. Another curious part of the plot is the line for 
S = 10^^ pairs / s and the source in the middle. The key 
rate is zero for low distances. Counter-intuitively, as the 
loss in the channel increases the key rate jumps. This is 
caused by the fact that at lower losses, the probability 
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FIG. 1: A semi-log plot of the secret key generation rate (Eqn. 
[T]) vs. the distance for a variety of pair generation rates (S) 
and for the cases where the source is kept either in Alice's 
enclave or in the middle. For low strength there is not much 
difference between the two situations, but at high power the 
case where the source is in the middle is superior. 



Secret Key Rate (R) vs. Pair Generation Rate (S) 
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FIG. 2: A log-log plot of the secret key generation rate (Eqn. 
[T]) vs the pair generation rate for a variety of transmission 
losses for the cases where the source is in Alice's enclave and 
when it is in the middle. The maximum pair generation rate 
cutoff is similar for all cases where the source is in Alice's 
enclave, but increases the losses when the source is placed in 
the middle. 



that a single timing window will have many photons at 
both Alice's and Bob's side is too high and thus the BER 
is too high. It is the ability of CW systems to change the 
effective mean photon number by changing the timing 
window, combined with locating the source in the mid- 
dle, that will give the CW system increased flexibility and 
further distances than a comparable pulsed system. As 
the losses increase, this problem disappears. When the 
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source is in Alice's enclave, the high power will continue 
to reach her detector regardless of the distance, so the 
same phenomenon does not occur. In fact, for S — 10^^ 
pairs / s there is no key generated for the system with 
the source inside Alice's enclave. 

The second plot (Fig. |2| shows the secret key gen- 
eration vs. the pair generation rate. Here, one can see 
the power cutoff for a particular distance more strikingly. 
Notice that for the system with the source inside Alice's 
enclave all the different distances have a similar cutoff, 
but for the system with the source in the middle, the 
cutoffs increase with distance. 



Secret Key Rate (R) vs. Transmission Losses 
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IV. COMPARING CW AND PULSED LASER 
SYSTEMS 



The approximation that N — is an integer and 
thus that each timing window consists of an integral num- 



ber of temporal modes is only justified for 



At 



» 1. It 



may be useful to use the results of section 2 when this is 
no longer the case. One can see that for a pulsed laser 
with >> 1, setting = 1 in section 2 should re- 

tpulsc 

produce the pulsed laser system. Putting both of the 
systems in the same framework allows for easy compar- 
isons between them. 

So when A^ = 1, the resultant state may only have one 
form of Young diagram, the horizontal ([6|. As A^ — + oo, 
the resultant state has a Young diagram that approaches 
vertical ([t]). For the mostly likely error, the 4-photon 

state, the Young diagrams are just and B . A Cal- 
culation of the BER yields 16 1% and 25% for the ther- 
mal and Poissionian states, respectively. However, that 
doesn't mean that Poissionian states are worse for QKD. 
The other factor is with what probability these multi-pair 
states occur. To compare the mostly Poissionian CW- 
laser case and the thermal pulsed-laser case, we used the 
same system parameters as in section 3. With the ad- 
dition of the fact that for the pulsed system A^ = 1 and 
ipuised = At = I ns, and Spuised = a-tllZtd ' ^'^ 
can perform a comparison. 



The third plot is again a plot of the secret key rate 
vs the distance for many pair generation rate S. Both 
systems had a source in the middle. The pulsed and CW 
systems are mostly identical except in the case of high 
power. The low loss cutoff is present for both systems, 
but is worse for the pulsed system. Also with high power 
the CW system has a positive rate for distances quite a 
bit further than pulsed systems. The fourth plot shows 
both that the improvement in cutoff as distance increases 
for both systems and that the separation between the 
cutoff for the pulsed and the CW systems increases as 
distance increases. 



FIG. 3: A semi-log plot of the secret key generation rate (Eqn. 
[T]) vs the distance for a variety of pair generation rates, for 
both the CW and the pulsed systems, for the case where the 
source is in the middle. The results for the two systems lie on 
top over each other for all S' < 1 x lO^'^ pairs / s. 



Secret Key Rate (R) vs. Pair Generation Rate (S) 
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FIG. 4: A log-log plot of the secret key generation rate (Eqn. 
[T]) vs the pair generation rate, for a variety of distances and 
for both the CW and the pulsed systems when the source 
is in the middle. For low pair generation rates the two are 
the same, but when the rates are high, the cutoff is slighty 
higher for the CW system. This separation increases with the 
transmission losses. 



V. CONCLUSIONS 

We have presented a method for calculating the ex- 
pected BER for a CW-laser EQKD system. The method 
consists of three reductions from the state of the light to 
easier to handle superpositions of states. First, the light 
state reduction proceeds from the laser state to a super- 
position of states with definite excitation number, then 
to a superposition of partition states. And finally, from a 
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partition state to a superposition of polarization states. 
The computationally intensive step is calculating all the 
weights by means of a loop over all possible partitions of 
a positive integer. We find that for lower pair generation 
rate (power) the CW and pulsed systems are very close in 
terms of secret key generation rates and maximum losses. 



When the pair generation rates are high (much higher 
than currently available) there is an advantage to using 
CW laser systems, if all other experimental parameters 
for the two systems are the same. In addition, including 
both Poissonian and thermal statistics allows for more 
practical simulations of EQKD systems. 
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